← Back
CWE-787

14,750 CVEs • Abstraction: Base • Likelihood of Exploit: High

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

JSON object

Loading...

CVEs (14,750)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Android
Jun 17, 2026
May 7, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption.
1Google
1Android
Jun 17, 2026
May 7, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to execute arbitrary code.
1Samsung
1Android
Jun 17, 2026
May 7, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.
1Samsung
1Android
Jun 17, 2026
May 7, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.
1Samsung
1Android
Jun 17, 2026
May 7, 2025
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
1Rt Labs
1P Net
Jun 17, 2026
May 7, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
1Rt Labs
1P Net
Jun 17, 2026
May 7, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet.
1Rt Labs
1P Net
Jun 17, 2026
May 7, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet.
1Rt Labs
1P Net
Jun 17, 2026
May 7, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An Out-of-bounds Write in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
1Rt Labs
1P Net
Jun 17, 2026
May 7, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to corrupt the memory of IO devices that use the library by sending a malicious RPC packet.
1Rt Labs
1P Net
Jun 17, 2026
May 7, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
1Rt Labs
1P Net
Jun 17, 2026
May 7, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
1Rt Labs
1P Net
Jun 17, 2026
May 7, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An Heap-based Buffer Overflow in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to induce a crash in IO devices that use the library by sending a malicious RPC packet.
1Google
1Tensorflow Serving
Jun 17, 2026
May 6, 2025
8.9 HIGH· v4
7.5 HIGH· v3
N/A· v2
Incorrect JSON input stringification in Google's Tensorflow serving versions up to 2.18.0 allows for potentially unbounded recursion leading to server crash.
-
-
Jun 17, 2026
May 6, 2025
N/A· v4
4.6 MEDIUM· v3
N/A· v2
Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefi...Show more
Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects everyone using Finit 4.2 or later that do not explicitly disable the plugin at build time. This bug is fixed in Finit 4.12. Those who cannot upgrade or backport the fix to urandom.c are strongly recommended to disable the plugin in the call to the `configure` script.Show less
1Dlink
1Dap 1520 Firmware
Jun 17, 2026
May 6, 2025
8.7 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component Authentication Handle...Show more
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been declared as critical. This vulnerability affects the function mod_graph_auth_uri_handler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.Show less
1Dlink
1Dap 1520 Firmware
Jun 17, 2026
May 6, 2025
8.7 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is p...Show more
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02. It has been classified as critical. This affects the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.Show less
1Dlink
1Dap 1520 Firmware
Jun 17, 2026
May 6, 2025
8.7 HIGH· v4
9.8 CRITICAL· v3
9.0 HIGH· v2
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /storage. The manipulation leads to stack-based buffer overflow....Show more
A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.Show less
1Openatom
1Openharmony
Jun 17, 2026
May 6, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
1Qualcomm
33Aqt1000 Firmware
Fastconnect 6200 FirmwareFastconnect 6700 Firmware+30 more
Jun 17, 2026
May 6, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.